Elastic Windows Event Explorer


Publisher - Microsoft-Windows-AAD

Event ID 1102

Message:

Code: %{OperationCode} %{OperationMessage}
%{AdditionalInformation}

Event Data:

# Name In Type
Out Type
1 OperationCode win:UInt32 win:HexInt32
2 OperationMessage win:UnicodeString xs:string
3 AdditionalInformation win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: LHDQYWYLJEPB4